Same sentiment. Also DNSSEC which is a requirement isn't the most straightforward to setup. It isn't even supported on digital ocean.